Your message dated Sat, 26 Nov 2016 18:38:14 +0000
with message-id <[email protected]>
and subject line Bug#845765: Removed package(s) from unstable
has caused the Debian Bug report #579067,
regarding nagios3-doc: nagios web pages embed images from external http sites
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
579067: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=579067
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: nagios3-doc
Version: 3.0.6-4~lenny2
Severity: normal
Tags: patch
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
The nagios web front page (main.html) embeds an image from an external
http site (sourceforge). This is quite problematic for systems that
wish to provide their nagios web pages over https. This causes
warnings to users that access the site over https that there is
non-https information embeded. It can be an information leak as well.
The nagios web pages should therefore not embed any source from
external sites.
I believe this may only affect nagios3 for lenny, as I don't see any
external source embedding in the pages provided by nagios3-doc for
squeeze.
Including a patch to remove the offending source below.
Thanks so much for maintaining nagios.
jamie.
- --- /usr/share/nagios3/htdocs/main.html.old 2010-04-24 19:09:11.000000000
-0400
+++ /usr/share/nagios3/htdocs/main.html 2010-04-24 19:09:26.000000000
-0400
@@ -78,10 +78,6 @@
</div>
</p>
- -<div align="center">
- -<a href="http://sourceforge.net/projects/nagios";><img
src="http://sflogo.sourceforge.net/sflogo.php?group_id=26589&type=2";
width="125" height="37" border="0" alt="SourceForge.net Logo" /></a>
- -</div>
- -
<div align="center" CLASS="disclaimer">
<br />
Nagios and the Nagios logo are trademarks, servicemarks, registered trademarks
or registered servicemarks owned by Nagios Enterprises, LLC.<br />
- -- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing'), (200, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.32-trunk-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)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=rr0V
-----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---
Version: 3.5.1.dfsg-2.2+rm
Dear submitter,
as the package nagios3 has just been removed from the Debian archive
unstable we hereby close the associated bug reports. We are sorry
that we couldn't deal with your issue properly.
For details on the removal, please see https://bugs.debian.org/845765
The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.
This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
[email protected].
Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)
--- End Message ---
